No-signaling Quantum Key Distribution: A Straightforward Approach 
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We outline a straightforward approach for obtaining a secret key rate using only no-signaling 
constraints. Assuming an individual attack, we consider all possible joint probabilities. First we 
suppose temporarily that Eve (an eavesdropper) is restricted to binary outcomes. We impose con- 
straints due to the no-signaling principle and given measurement outcomes. Within the remaining 
space of joint probabilities, by using convex optimization, we find the maximum mutual information 
Ib"e x (2) between Bob (a user) and a binary-restricted Eve. Then, by considering a certain coarse 
graining mapping, we show how to get a bound on Ibe x , the maximal mutual information between 
Bob and Eve, whose number of outcomes is not restricted, from the quantity Ig'^ x (2). Using the 
Csiszar-Korner formula and the calculated bound, we obtain the key generation rate. 



PACS numbers: 03.67.Dd 

I. INTRODUCTION 

A nonlocal realistic model, the de Broglic-Bohm the- 
ory, is not only consistent with quantum theory but 
also coherently describes measurement processes includ- 
ing wave- function collapse pQ . This raises a question if all 
realistic models must be nonlocal to be consistent with 
quantum theory, which led to the discovery of Bell's in- 
equality [HE]. 

Recently, the nonlocality involved with Bell's inequal- 
ity and entanglement has entered a new phase of its de- 
velopment. It turned out that entanglement is a concrete 
physical resource for information processing [4]. In the 
same context, interestingly, it was found that with non- 
local correlations we can generate a cryptographic key, a 
private random shared sequence, whose security relies on 
only the no-signaling principle [5H7J. For this, no quan- 
tum theory is used for the security analysis. However, the 
only currently available way to realize nonlocal correla- 
tions is by using quantum entanglement. So these pro- 
tocols are called no-signaling quantum key distribution 
(QKD). Remarkably, what is used to show security in no- 
signaling QKD is only the outcomes of measurements. As 
long as the outcomes satisfy a certain condition, security 
is provided, no matter how the outcomes are generated. 
Thus, no-signaling QKD has device-independent security. 
To satisfy the security condition, detector efficiency must 
be much higher than what is currently achievable. If de- 
tectors with that high efficiency are available, however, 
it is also possible that the Bennett-Brassard 84 QKD 
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protocol [5j with decoys [9] for source imperfection and 
squashing |iOi for detector imperfection obtains security. 
(See also a recent innovative proposal for a user-detector- 
free protocol to get security with high loss 

In Refs. [Jj, the security of no-signaling QKD is 
elegantly analyzed, in the case of individual attacks, 
by using known properties of non-signaling correlations 
[T^l IT5] . In this paper, we take a straightforward ap- 
proach to no-signaling QKD with use of convex optimiza- 
tion. We consider a protocol proposed by Acm, Massar, 
and Pironio (AMP) [7J. We analyze the security of the 
AMP protocol [14] in the case of an individual attack. In 
order to make the problem feasible, first we make an as- 
sumption that Eve (an eavesdropper) is restricted to have 
only binary outcomes. Then we consider all possible joint 
probabilities compatible with a given set of measurement 
outcomes and the no-signaling constraint. Within the re- 
maining space of joint probabilities, we maximize the mu- 
tual information between Bob (a user) and Eve, Ibe(2), 
by convex optimization, to obtain I^ x (2). Here 2 de- 
notes the number of Eve's outcome. On the other hand, 
we prove two Propositions involving coarse graining of 
Eve's outcome. Using these Propositions, we derive a 
bound on the maximal mutual information, Igjf , be- 
tween Bob and Eve (whose number of outcomes is un- 
restricted) from the quantity Ibe{2)- Then a key gen- 
eration rate K is obtained by using the Csiszar-Korner 
formula [16] in our case, K = Iab ~ I be- Here Iab is 
the mutual information between Alice and Bob. 

The key generation rate obtained here is lower than 
the one in Ref. [7J. This is because information loss is 
inevitable in the coarse graining process. However, there 
can be other problems for which the straightforward ap- 
proach is more feasible. As well, our method to derive a 
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bound on Tg% x from T B l j!f(2) (with some loss of informa- 
tion) is applicable to other cases. For example, using the 
value of I^£ X (2) obtained in Ref. [T7] from monogamy 
properties, a bound on I^lf can be immediately obtained 
by our method (what can be obtained from Eve's guess- 
ing probability on Bob's outcome is not I be but Ibe(2) 

US). 



II. /be" (2) BY CONVEX OPTIMIZATION 
A. AMP protocol 

Two users, Alice and Bob, attempt to distribute a Bell 
state, |<£+) = (1/V2)(|0)a|0) b + |1)a|1)b), where A and 
B denote Alice and Bob, respectively, and |0) and |1) 
compose an orthonormal basis of a quantum bit (qubit). 
To mimic a realistic case with channel noise, we assume 
the Bell state was transformed to a Werner state 



p = p\<t>+){cj> + \ + (l-p) 



4' 



(1) 



where < p < 1. Although we use the Werner state to 
model potential data, our method does not rely on this. 
For each copy of the distributed state, Alice chooses the 
value of an index x among 0,1, and 2 with probabili- 
ties q, (1 — q)/2, and (1 — q)/2, respectively. Then she 
performs a measurement M x on her qubit. Mo is a mea- 
surement composed of the projections {|+)(+|, |— )(— |} 
where |±) = (l/\/2)(|0) ± |1)). M x and M 2 are mea- 
surements composed of {|7r/4)(7r/4|, |57r/4) (57r/4|} and 
{| - 7r/4)(-7r/4|, I - 57r/4) (-57r/4|}, respectively. Here, 
\4>) = (1/V2)(|0) +e^|l)) is a state obtained by rotating 
the state |+) around the z-axis by an angle <j>. Bob also 
chooses a value of his index y for each copy, either or 
1, with probabilities q' and 1 — q' , respectively. Then he 
performs a measurement N y on his qubit. Here N = Mq 
and Ni is composed of {|tt/2) (tt/2|, | 3tt/2> (3tt/2 | }. Next, 
both Alice and Bob publicly announce their values x 
and y for each copy. Measurement outcomes in the case 
x = y = are kept and used to generate the key. Out- 
comes from other cases are publicly announced to esti- 
mate Eve's information. Alice and Bob choose q and q' 
close to 1 so that almost events are in the case x = y = 0. 
This does not affect the security in the asymptotic case 
we consider. 



B. Constraints on the probability distributions 

We assume an individual attack in which Eve follows 
the same procedure for each instance. For each choice 
of measurements x and y by Alice and Bob, there is a 
joint probability for measurement outcomes a,b,e for Al- 
ice, Bob, and Eve, respectively. The joint probability for 
a, b, e, conditioned on measurements x and y is denoted 
by P(a, b, e\x, y). Here, a and b are binary variables ac- 
cording to the protocol. The number of Eve's outcomes e 



should be arbitrary in principle. Let us assume, however, 
that Eve's outcome is binary for now. 

Let us write constraints for the joint probabilities. 
First, they satisfy normalization 



E 

a.b.e 



P(a,b,e\x,y) = 1 



(2) 



for each x, y. Let us denote the marginal distribution for 
Alice and Bob, J2 e -^ > ( a ' ^> e \ x > v)i ^ P{ a > b, A\x, y). 

The marginal distributions corresponding to the state 
in Eq. ([!]) should be consistent with the measurement 
outcomes. For the measurement basis choice (x = 0, y = 
0) we have 



P(0,0,A|0,0) = P(l,l, A|0,0) = 
P(0,1,A|0,0) = P(1,0,A|0,0) = 



p 1 -p 
2 4' 
1-P 
4 



For (x = 0, y = 1), where there is no correlation, 
P(a, b, A|0,l) = i 



(3) 



(4) 



for each a and b. For {x = 1, y = 0), (x = 1, y = 1), and 
(x = 2,y = 0), 

P(0,0,A\x,y) = P(l,l,A\x,y) 

= 0.854 l + ^^a 
2 4 

P(0,l,A\x,y) = P(l,0,A\x,y) 

= 0.146 | + iz£ = ^ (5) 

where the two numerical values, 0.854 and 0.146, are ob- 
tained from measurement outcomes for the Bell state. 
For (x = 2,y = l), 

P(0,0,A|2,1) = P(1,1,A|2,1) = 
P(0,1,A|2,1) = P(1,0,A|2,1) = a. (6) 

Now we consider no-signaling conditions. Because the 
marginal distribution for Alice and Eve must be indepen- 
dent of Bob's basis choice, 



P(o,A,e|a;,0) = P(a, A, e\x, 1) 



(7) 



for each x. Here we use a notation for marginal distribu- 
tions analogous to the previous one. Similarly, 

P(A,b,e\0,y) = P(A,6,e|l,y) - P(A,b,e\2,y) (8) 

for each y. Another no-signaling constraint is that Eve's 
marginal distribution is independent of the basis choices 
of Alice and Bob, 



P(A,A,e\x,y) = P(A, A, e|0, 0) 



(9) 



for each x, y. 
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Proposition- 2: The maximal mutual information, 
^bW ■> i s bounded by the sum of the maximal mutual 



information in the binary case. 
Proof. Suppose that 



I B l E x (2), and %, namely 



I 



BE 



>/^(2) + X . 



(10) 



Applying the prescribed coarse graining to the distribu- 
tion P(i,j) corresponding to I^ x , we get a probabil- 
ity distribution Q(i,j) which gives another value of the 
binary-case mutual information, I' EB (2). By inequality 
([10]) and Proposition- 1, we find I' EB {2) > I 1 § E /X (2). This 
is a contradiction because I B l E x (2) is maximal. □ 



FIG. 1: Mutual informations depending on the noise parame- 
ter p. Positive key is possible in the region where /jjjf (dash- 
dotted line) is smaller than Iab (dashed line). This occurs 
for P 0.936. The max I be curve should actually go higher 
than 1 (it is equal to the solid /§ L | ; X (2) curve offset by x), but 
we have truncated it at 1 for clarity. This does not affect any 
statements about the key since Iab < 1. 



C. Maximal mutual information in binary case 

We maximize the mutual information, Ibe(2), within 
the constraints ([2])-([9]) by convex optimization (see Ap- 
pendix A). As we can see in Fig. 1, in the regime p < 

where the Werner state admits a local realistic model, 
Eve has full information about Bob, namely I B l E x (2) = 1, 
so there can be no secret key. However, in the regime 
where ^ < p < 1, Eve's information is restricted. When 
p=l, I 1 §% x (2) ~ 0.383 and I A b is equal to 1. 



III. DERIVATION OF A BOUND ON igjf 
FROM Ibe x (2) 

Let us consider a joint probability, P(i,j), between 
two parties. Here i is a binary random variable but j € 
{0, 1, N}, where N is arbitrary. We consider a coarse 
graining mapping for j in which the number of outcomes, 
N, is reduced to 2. The joint probability after coarse 
graining is denoted by Q(i,j). Let us denote the mutual 
information due to P(i,j) before coarse graining by I(N), 
and denote the mutual information due to Q(i,j) after 
coarse graining by I {2). The coarse graining reduces the 
mutual information. We set the amount of reduction to 
be A = I(N) — 1(2). 

Proposition- 1: For a particular prescribed coarse grain- 
ing, the information loss A is bounded by a certain quan- 
tity x — 0.322, namely A < \ (a description of the chosen 
coarse graining and the proof of the bound are given in 
Appendix B) 

Because N is arbitrary, we can say that Ib'e x (N) = 
Ig E x ■ Now, using Proposition- 1, we can get a bound for 

1 BE ■ 



IV. DISCUSSION AND CONCLUSION 

Using the Csiszar-Korncr formula [TB] and 
Proposition-2, we can get a a lower bound on the 
key generation rate 

k = i AB -iT E x m-x- (ii) 

The region where we have non-zero K is 0.936 < p < 1. 
The maximal K, which is obtained in noiseless case, p = 
1, is 0.295. This is smaller than the corresponding value, 
0.414, in Ref. [BJ. This is because of information loss 
in the coarse graining. We overestimated the amount of 
information that Eve loses in the coarse graining. By the 
same reasoning, the minimal value of p for non-zero K, 
0.936, is greater than the corresponding threshold in Ref. 

®- 

However, let us suppose that Eve is restricted to have 
only binary outcomes. Then we have K = 1 ab — I be? '(^) 
which gives a maximal K = 0.617. This exceeds the cor- 
responding value in Ref. [B] . This is not strange because 
here Eve is restricted. Users can get more key for re- 
stricted Eve than for unrestricted Eve. 

To summarize, we took a straightforward approach to a 
no-signaling QKD protocol, the AMP protocol. Assum- 
ing an individual attack, we consider all possible joint 
probabilities. Here we supposed temporarily that Eve's 
strategy is binary to reduce the dimension of the space 
of joint probabilities. We imposed constraints due to the 
no-signaling principle and measurement outcomes, which 
reduce the dimension of the space. By using convex opti- 
mization, we maximized Eve's information on Bob within 
the remaining space, to obtain I EE X (2). Then by consid- 
ering a coarse graining mapping, we showed how to get 
a bound on the mutual information between an unre- 
stricted Eve and Bob, Ig E x , from the quantity I B l E x (2). 
Using the Csiszar-Korner formula QjBJ and the bound, we 
got a non-zero key generation rate. 
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Appendix A: Maximizing Ibe(2) 

Here we maximize the mutual information for a binary- 
restricted Eve, I be (2), within these constraints ([2|- 
([9]) by convex optimization. For visual convenience, 
P(a, 6, e\x, y) are denoted as: 

P(a, &,e|0,0) = x abei P(a, b, e|0, 1) = y abe , 
P(a, &, e|l, 0) = z abe , P(a,b,e\l,l) =u abe , 
P(a,b,e\2,0) = v abe , P(a, b, e|2, 1) = w abe . (Al) 

We regard abe as a binary number, for example, 
P(1,0,1|0,0) =1101 =x 5 . 

Now let us rewrite the constraints regarding measure- 
ment outcomes. For Eqs. ^ and Q, we have, respec- 
tively, 



x 

X2 



xi = x 6 + x 7 = 



X 3 = X4 + X 5 



and 



2/4 + 2/5 = 2/6 + 2/7 



2/0 + 2/1=2/2+ 2/3 

For Eq. we have 

A + A 1 = A 6 + A 7 = a 

A 2 + A 3 = At + A 5 = /3, 

where A = z, u, v. For Eqs. @, we have 

wq + wi — w e + w 7 = (3 

W2 + W3 — w 4 + w 5 = a. 



(A2) 



(A3) 



(A4) 



(A5) 



We can see that Eqs. (A2)-(A5) make the normalization 
in Eq. ^ satisfied. Thus the normalization condition 
can be removed. 

The no-signaling condition in Eq. Q can be expressed 

as 



x i + x i+2 
z i + z i+2 
Vi + V i+2 



Ui +Vi+2, 
U{ + U i+2 , 
Wi + W i+2 , 



(A6) 



where i = 0, 1 and 4, 5. We can see that, by Eqs. (A2) 



(A5), the case when i = 0,4 implies the case when 1,5, 



respectively. Thus the latter cases can be removed. The 
no-signaling condition in Eq. pi can be expressed as 



Xj -\- Xj_|_4 

Zj + z j+i 
Vj + Vj+i 

Uj + Uj + 4 



z j + 2/j+4j 
Vj + Vj+4, 
Uj + Uj + 4, 
Wj + W j+ 4, 




FIG. 2: 7sb(2) is a convex function with respect to the vari- 
ables a = xo + £4 and b = X2 + xe (upper surface). As well, 
the given constraints define a convex region (lower surface). 



where j = 0, 1, 2, 3. We can also see that, by Eqs. (A2) 
(A5), the case when j = 0, 2 implies the case when j = 



1,3, respectively. Thus the latter cases can be removed. 
We can verify that Eqs. (A6) and (A7) (or equivalently, 
Eqs. (7) and (8)) lead to Eq. Q, which can thus be 
removed. As a result, we can remove all variables Bi 
where B — x,y, z, u, v, w and i is an odd number. 

Therefore, by non-negativity of each quantity, the 
space in which we optimize Ibe{^) is as follows: 



< x k < 



P 



l-p 



2 4 ' 
where k = 0, 6 and I = 2, 4, 



< xi < 



l-p 



where j=0,2,4,6, and 



< Vi < |, 



< A k < a, < Ax < 0, 
< w k < (3, 0<w t <a, 



(A8) 



(A9) 



(A10) 



where A — z,u,v and k = 0, 6 and / = 2,4. These 
constraints are those that remain in Eqs. (A6| and (A7) 
after removing odd numbered variables. 

To find I B l E :x (2), we use linear programming. Of 
course, the function Ibe(2) is not linear, so we cannot 
use it directly as the objective function in a linear pro- 
gram. However, we will show that Ibe{2) is a convex 
function in the relevant variables (see Fig. 2), which will 
allow us to calculate its maximum with the assistance 
of a linear program. Now, because the key is generated 
only from the results where x = y = 0, we need to cal- 
culate the mutual information of the joint distribution 
P(A,6, e|0,0) = R(b,e). It is useful to rewrite the mu- 
tual information Ibe{2) as a function of Eve's conditional 
distribution. For this, Bob's marginal distribution, which 
is fixed by the measurement outcomes, will be denoted 
as R(b) = R(b, A) = | (b = 0, 1). Let 



(A7) 



R(e\b) 



R(b,e) 
R(b) 



2R(b,e) 



(All) 
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denote the distribution of Eve's outcomes conditioned 
on Bob's outcomes, all in the basis (this is different 
from elsewhere, where conditioning refers to different ba- 
sis choices). Then the mutual information is given by 



Ibe{2) = J2 be R(b)R(e\b)log 2 

~ 2 Sf),e 



R(e\b) 



J2 b R(b)R(e\b) / 

^Mrisy !Ai21 



We note the following fundamental property of the 
mutual information: when a marginal is fixed, the re- 
maining function (Eq. (A12)) is convex with respect to 
the conditional distribution R(e\b) [IS]. Since the con- 
ditional probabilities R(e\b) and the joint probabilities 
R{b, e) are related by a simple linear rescaling, the mu- 
tual information Ibe{2) is therefore a convex function 
of the joint probabilities R(b,e). Furthermore, we can 
reduce the number of independent variables in the distri- 



bution R(b, e) from four to two. From Eq. ( A2 ) , we have 
the following constraints: 

R(0\0) + R(l\0) = 2(x a + Xl + x A + x 5 ) = 1 
R(p\l) + R(l\l) = 2(x 2 + x 3 + x 6 +x 7 )=l (A13) 

This corresponds to taking a two-dimensional linear slice 
through the ostensibly four variable function Ibe{2). 
We will choose the two independent variables to be 
a = x + x 4 (representing correlation) and b = x 2 + x 6 
(representing anticorrelation). The final form for the mu- 
tual information is 



I BE (2) = H(B) + H(E) - H(B, E) 
with the Shannon entropies 



(A14) 



H(B) = 1 

H(E) = -[(a + b)log 2 (a + b) 

+(l-(o + 6))log a (l-(o + 6))] 
H(B,E) = -[alog 2 a + (i-a)log 2 (|-a) 

+61og 2 6 + (i-6)log 2 (i-6)]. (A15) 

This is a convex function over the domain (a, b) £ [0, 2 ] x 



[0. 



Moreover, it is symmetric under the transforma- 



b). 



tions (a, b) O (&, a) and (a, b) -O- (| — a, 

Next, we note that the constraints (A8)-(A10| define 
a convex set. We define C £ [0, \] x [0, |] as the pro- 
jection of this set onto the (a, 6)-plane. We notice that 
C is convex and is symmetric under the same transfor- 
mations as Ibe{2) given above. To maximize the convex 
function Ibe(2) on the convex set C, we need only eval- 
uate Ibe(2) at the extreme points of C. Therefore, we 
must find the extreme points of C. It is easy to see that 
choosing all even parameters (e.g. X2, w 6j etc.) to be 
satisfies the constraints. Therefore (0,0) £ C. By sym- 
metry, we must also have ( 2 ; 2 ) € C. These two points 
are clearly extreme points. To find the remaining ex- 
treme points, we will use linear programming. We point 
out that any other method for finding the extreme points 



of C is equally valid. To this end, we consider the corre- 
lation function 



E(a, b) = a — b. 



(A16) 



Since this function is linear, it is suitable to use as the 
objective function of a linear program. Specifically, for 
fixed value of the noise parameter p, we perform the fol- 
lowing optimization: 



gmax 



max E(a, b) 

subject to (a, b) G C. 



(A17) 



Because E is convex, it also achieves its maximum at 
some extreme point of C. In general, we should not expect 
Ibe{2) and E to achieve their maximal values at the same 
extreme points. However, by using the simpler function 
E, we can deduce that the set C has a very simple set 
of extreme points. Indeed, modulo symmetry, there is 
only one other extreme point to find. The above linear 
program yields the following extreme point, for which E 
achieves its maximum: 



(a*, 6*) = 




(A18) 



We conclude that when p £ [0, ^75), the set C is simply 
the square [0, 2 ] x [0, 2 ]. The maximum of Ibe(2) in this 
case occurs at (|,0) and is exactly 1. This corresponds 
to the parameter regime where the Werner state admits 
a local realistic model [7]. 

From the symmetry of the set C, we conclude that 
there are three other valid extreme points at (6* , a* ) , (| — 
a* , i — &*) , and ( \ — b* , g — a* ) . As well, the function E is 
constant along the line b = a— a*, which joins the extreme 
points (a* , K ) and ( \ — 6* , \ — a* ) [20 . Finally, there 
cannot be any extreme points in the region b < a — a* , 
since in this region E(a,b) > E(a*,b*) — E ma *. By 
symmetry, this holds as well for the region b > a + a* . 
Thus, we conclude that C has exactly the extreme points 
that have already been listed. Since 7s_e(2)|(o,o) = 0, 
T b 1 e x (2) is therefore found to be I B e{2)\ { ^ m . 



Appendix B: Proof of Proposition-1 

In this appendix, we prove Proposition-1, namely that 
the information loss A can be bounded by considering 
a particular coarse graining. Let us consider conditional 
probabilities P(0\j) and P(l\j) due to the joint proba- 
bility P(i,j). We re-label j such that P(0\j)/P(l\j) > 
P(Q\j + l)/P(l\j + 1) for each j. If P(0\j)/P(l\j) > 1/2 
for all j, then J is defined to be N. Otherwise, there 
exists a J such that P(0\J)/P(l\J) > 1/2 and 1/2 > 
P(0|J + 1)/P(1|J + 1). Let P(i,j) denote the joint prob- 
abilities after re-labeling. These joint probabilities can be 
written as P(i,j) — P(i\j)P(j), where P(j) is a marginal 



G 



distribution for Bob. We will calculate the mutual infor- 
mation for this (N + l)-outcome distribution: 

I(N) = H(t)-H{i\j) 

N 

= H{i)-Y l H[H0\j)\m, (Bl) 

3=0 

where we have written the conditional entropy as a binary 
entropy function H[q] = -[<?log 2 q+(l-q) log 2 (l - q)]. 

Now let us describe the prescription for the coarse 
graining. It is a mapping for j in which all j < J are 
mapped to and the others are mapped to 1. The joint 
probabilities after the mapping are 



Q(0,0) 
Q(1,0) 
0(0,1) 

0(1,1) 



3=0 
J 

3=0 
N 

E p (o\j)p(j), 
j=j+i 

N 

E p mHj)- 

j=J+l 



(B2) 



where qj = P(j)/Q(0) and Tj = P(j)/Q(l), which have 
the properties 53j=o 1i = 1 an< l 
P(0\j) = rrij. Let us estimate the first quantity in Eq. 



3 =j+i r 3 = !• We set 



(B5). By concavity of H and Eq. (B3), it is clear that 

H = H[Q(0\0)] - EL O H[H0\j)]Q3 = H[EU m ^ ~ 
^2j—Q H[rrij]qj > 0. Let us introduce go(x) = 2x. Then 



j ./ 
M = #E m i ? i] ~ E H \- m jh 

3=0 3=0 

J J 
+ {-9o E m J H ] + E -9o t m J 1 % } 

j 

= H[m ] - g [fh ] + E{ _ #[ TO .j] + So [raj]}??, 

< H[m ] - g [fh ] 

< max {H[x\ -g [x]} = X- 0.322. (B6) 

0<x<i 



Here we can calculate conditional probabilities 

Q(i,3) 



Q(i\j) 



0(i) ' 



(B3) 



We have used X)j=o TO i?i = TO o, the linearity of go(x), 
and the bound — H[mj] + go[mj] < (which can be 
seen considering their graphs). Similarly, by introducing 
gi(x) = —2x + 2 and TO i r i = we can estimate 



where Q(j) is the marginal distribution for Eve after the the second quantity in Eq. p55|) which turns out to be 
coarse graining; that is, 0(0) = J2^=o P U) anc ^ 0(1) = 



the same form as the first one. 



J2f=j+i P(j)- Now we are ready to get 



1(2) 
H(i) 



H(i) - H(i\j) 

{if[O(Q|0)]O(0) + iJ[O(0|l)]O(l)}- (B4) 



By Eq. (B5) and these results, we get 



From Eqs. (Bl) and (B4), we get 
A = I(N) - 1(2) 



A<x0(o) + x0(i) = x- 



(B7) 



= {i/[Q(0|0)]-E^[^(0|j)]%}0(0) 



3=0 



N 



+{tf[O(0|l)]- E ^(0b)b}O(l),(B5) 
j=J+l 
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